Netweaver Enterprise Portal (Sap) - vulnerabilities (CVEs)
20 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2024-10-08. Vendor: Sap.
CVEs of Netweaver Enterprise Portal
- CVE-2024-47594 - CVSS 5.4 (medium), 2024-10-08: SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An…
- CVE-2024-25645 - CVSS 5.3 (medium), 2024-03-12: Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing…
- CVE-2023-28761 - CVSS 6.5 (medium), 2023-04-11: In SAP NetWeaver Enterprise Portal - version 7.50, an unauthenticated attacker can attach to an open interface and make use of an open API to access a service…
- CVE-2023-26461 - CVSS 6.8 (medium), 2023-03-14: SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can…
- CVE-2022-35298 - CVSS 6.1 (medium), 2022-09-13: SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability.…
- CVE-2022-35227 - CVSS 6.1 (medium), 2022-07-12: A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to…
- CVE-2022-35225 - CVSS 6.1 (medium), 2022-07-12: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network,…
- CVE-2022-35170 - CVSS 6.1 (medium), 2022-07-12: SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network,…
- CVE-2022-32247 - CVSS 6.1 (medium), 2022-07-12: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker…
- CVE-2022-35172 - CVSS 6.1 (medium), 2022-07-12: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in…
- CVE-2022-26105 - CVSS 6.1 (medium), 2022-04-12: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker…
- CVE-2022-24397 - CVSS 6.1 (medium), 2022-03-10: SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site…
- CVE-2022-24395 - CVSS 6.1 (medium), 2022-03-10: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in…
- CVE-2021-21489 - CVSS 4.8 (medium), 2021-09-14: SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulting in Stored…
- CVE-2021-33703 - CVSS 8.3 (high), 2021-08-10: Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a…
- CVE-2021-33702 - CVSS 8.3 (high), 2021-08-10: Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An…
- CVE-2020-6323 - CVSS 6.1 (medium), 2020-10-15: SAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-controlled inputs and allows an attacker…
- CVE-2018-2435 - CVSS 6.1 (medium), 2018-07-10: SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in…
- CVE-2015-2812 - CVSS 5 (medium), 2015-04-01: XML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to…
- CVE-2015-2811 - CVSS 5 (medium), 2015-04-01: XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet…
